Skip to content
OpenAdvisories

Product · HT Plugins

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2025-7645

    Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion

    The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete-file' field in all versions up to, and including, 3.2.8.…

    HT Plugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) Web / CMS